C15t
c15t/c15t
Work with c15t consent management docs, APIs, and integrations for Next.js, React, and JavaScript.
Find un-annotated data collection and data egress in a codebase and add PolicyStack collecting() / sharing() / thirdParty() / defineCookie() call sites so the generated policy reflects what the code…
Install Policystack Instrument
$ npx skills add jamiedavenport/policystack --skill policystack-instrument -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install jamiedavenport/policystack policystack-instrument --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/jamiedavenport/policystack.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugin/skills/policystack-instrument .claude/skills/policystack-instrument && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "policystack-instrument" agent skill from https://github.com/jamiedavenport/policystack/tree/main/plugin/skills/policystack-instrument into .claude/skills/policystack-instrument/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "policystack-instrument", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/jamiedavenport/policystack/tree/main/plugin/skills/policystack-instrumentType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add jamiedavenport/policystack --skill policystack-instrument -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install jamiedavenport/policystack policystack-instrument --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jamiedavenport/policystack.git skills-src && mkdir -p .agents/skills && cp -r skills-src/plugin/skills/policystack-instrument .agents/skills/policystack-instrument && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "policystack-instrument" agent skill from https://github.com/jamiedavenport/policystack/tree/main/plugin/skills/policystack-instrument into .agents/skills/policystack-instrument/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "policystack-instrument", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add jamiedavenport/policystack --skill policystack-instrument -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install jamiedavenport/policystack policystack-instrument --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jamiedavenport/policystack.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/plugin/skills/policystack-instrument .cursor/skills/policystack-instrument && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "policystack-instrument" agent skill from https://github.com/jamiedavenport/policystack/tree/main/plugin/skills/policystack-instrument into .cursor/skills/policystack-instrument/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "policystack-instrument", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/jamiedavenport/policystack.git --path plugin/skills/policystack-instrument--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add jamiedavenport/policystack --skill policystack-instrument -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install jamiedavenport/policystack policystack-instrument --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jamiedavenport/policystack.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/plugin/skills/policystack-instrument .gemini/skills/policystack-instrument && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "policystack-instrument" agent skill from https://github.com/jamiedavenport/policystack/tree/main/plugin/skills/policystack-instrument into .gemini/skills/policystack-instrument/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "policystack-instrument", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install jamiedavenport/policystack policystack-instrumentInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add jamiedavenport/policystack --skill policystack-instrument -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/jamiedavenport/policystack.git skills-src && mkdir -p .github/skills && cp -r skills-src/plugin/skills/policystack-instrument .github/skills/policystack-instrument && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "policystack-instrument" agent skill from https://github.com/jamiedavenport/policystack/tree/main/plugin/skills/policystack-instrument into .github/skills/policystack-instrument/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "policystack-instrument", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add jamiedavenport/policystack --skill policystack-instrument -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install jamiedavenport/policystack policystack-instrument --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jamiedavenport/policystack.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/plugin/skills/policystack-instrument .opencode/skills/policystack-instrument && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "policystack-instrument" agent skill from https://github.com/jamiedavenport/policystack/tree/main/plugin/skills/policystack-instrument into .opencode/skills/policystack-instrument/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "policystack-instrument", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
policystack-instrument- GitHub stars
- 164
- Token cost
- ~916 tokens
- SKILL.md length
- 346 words
- Files
- 1
- Skills in repo
- 4
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Find un-annotated data collection and data egress in a codebase and add PolicyStack collecting() / sharing() / thirdParty() / defineCookie() call sites so the generated policy reflects what the code…
- Works in 3 steps: Persisted user input / DB writes with no… → Outbound requests carrying user data… → Cookie / localStorage writes and tracker…
- Legal & Compliance work in your project
- SKILL.md covers The markers (from…, What counts as an un-annotated… and Procedure
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Policystack Instrument is an agent skill from jamiedavenport/policystack. Find un-annotated data collection and data egress in a codebase and add PolicyStack collecting() / sharing() / thirdParty() / defineCookie() call sites so the generated policy reflects what the code actually does.
Its SKILL.md is about 920 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Legal & Compliance. It works with React. The repository describes itself as: Open Privacy Infrastructure. The licence is Apache-2.0.
When your agent uses it
- Legal & Compliance work in your project
Example prompts
- “/policystack-instrument”
Workflow steps
3 steps, taken from the first numbered list in SKILL.md.
- Persisted user input / DB writes with no nearby collecting().
- Outbound requests carrying user data (analytics, CRM, webhooks) with no
- Cookie / localStorage writes and tracker /SDK init with no
What it can do on your machine
Read from SKILL.md and the folder at commit fa2f297. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Policystack Instrument loads about 916 tokens when it runs. Until then it costs about 61 tokens; SKILL.md has 346 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from jamiedavenport/policystack at commit fa2f297, republished under its Apache-2.0 licence (© jamiedavenport). 346 words, ~916 tokens.
Download SKILL.mdSave it as
.claude/skills/policystack-instrument/SKILL.md (or your agent's skills folder).- name
- policystack-instrument
- description
- Find un-annotated data collection and data egress in a codebase and add PolicyStack `collecting()` / `sharing()` / `thirdParty()` / `defineCookie()` call sites so the generated policy reflects what the code actually does.
<!-- Generated by @policystack/sdk renderSkillPack() — do not edit by hand. Run `vp run gen`. -->policystack-instrument
Make the policy reflect reality: annotate real data flows at their call sites
so the @policystack/vite build scans them into the config. The markers are
identity functions — they return their value unchanged and have no runtime
effect; the build reads them statically.
The markers (from @policystack/sdk)
collecting(category, value, labels)— wrap a value at the point it is stored.labelsmaps each field to a human label, orIgnoreto exclude it (e.g.password: Ignore).sharing(key, recipient, value)— wrap an outbound payload at a data egress edge (the CCPA sell/share signal).thirdParty(name, purpose, policyUrl?)— declare a vendor exists; place next to its initialisation.defineCookie(category)— declare a consent category at its use site.
Constraint: category, key, recipient, name and the label
map must be string / object literals. Non-literal arguments are skipped by
the static scanner (it emits a build diagnostic — they are not silently lost,
but no annotation is produced). Never pass a variable.
What counts as an un-annotated flow
The scanner already recognises common cookie/vendor surfaces (document.cookie,
js-cookie, cookies-next, react-cookie, server set-cookie, and
~30 known vendor imports) and flags any that are not gated by
<ConsentGate>, a consent.has(...) check, or an accept/set helper. Look
for, in priority order:
- Persisted user input / DB writes with no nearby
collecting(). - Outbound requests carrying user data (analytics, CRM, webhooks) with no
sharing()and nothirdParty(). - Cookie /
localStoragewrites and tracker<script>/SDK init with nodefineCookie()and not consent-gated.
Show full SKILL.md (109 more words)Show less
Procedure
- Grep the data layer and network calls; list candidate flows.
- Add the smallest correct marker at each call site, reusing presets where
they fit so labels stay consistent:
- Data categories:
DataCategories.AccountInfo,DataCategories.Communications,DataCategories.DeviceInfo,DataCategories.LocationData,DataCategories.PaymentInfo,DataCategories.SessionData,DataCategories.UsageData - Lawful bases:
LegalBases.Consent,LegalBases.Contract,LegalBases.LegalObligation,LegalBases.LegitimateInterests,LegalBases.PublicTask,LegalBases.VitalInterests - Retention:
Retention.AsRequiredByLaw,Retention.NinetyDays,Retention.OneYear,Retention.ThirtyDays,Retention.ThreeYears,Retention.UntilAccountDeletion,Retention.UntilSessionExpiry - Vendors:
Providers.AWS,Providers.Auth0,Providers.Clerk,Providers.Cloudflare,Providers.Datadog,Providers.GoogleAnalytics,Providers.LemonSqueezy,Providers.Loops,Providers.Mixpanel,Providers.Paddle,Providers.PayPal,Providers.Plausible,Providers.PostHog,Providers.Postmark,Providers.Resend,Providers.SendGrid,Providers.Sentry,Providers.Stripe,Providers.Vercel - Compliance bundles:
Compliance.CCPA,Compliance.GDPR,Compliance.UK_GDPR
- Data categories:
- Ensure every newly scanned category has a matching
data.context/cookies.contextentry inpolicystack.ts(the typed config enforces this). - Run
policystack-auditto confirm the config still validates.
© jamiedavenport, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in plugin/skills/policystack-instrument of jamiedavenport/policystack.
Open the folder on GitHubat commit fa2f297
Compare with similar skills
Policystack Instrument next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Policystack Instrument this skilljamiedavenport/policystack | 164 | — | ~916 | Automated safety check: Pass | Apache-2.0 | |
| C15tc15t/c15t | 1.9k | 1 repos | ~1.6k | Automated safety check: Pass | Apache-2.0 | |
| Add Session Recordinggotempsh/temps | 828 | — | ~1.9k | Automated safety check: Pass | Apache-2.0 | |
| Dependency Auditoralirezarezvani/claude-skills | 28k | — | ~1.1k | Automated safety check: Pass | MIT | |
| Vercel Composition Patternssupabase/supabase | 111k | 58 repos | ~726 | Automated safety check: Pass | MIT | |
| Electron Multi-Process ArchitectureiOfficeAI/AionUi | 33k | 1 repos | ~1.8k | Automated safety check: Pass | Apache-2.0 |
Similar skills
Add Session Recording
gotempsh/temps
Add privacy-aware session recording and replay to React applications using the Temps SDK.
Dependency Auditor
alirezarezvani/claude-skills
Audit and manage dependencies across multi-language projects.
- Official
Vercel Composition Patterns
supabase/supabase
React composition patterns that scale. An agent skill from supabase/supabase.
Electron Multi-Process Architecture
iOfficeAI/AionUi
Tells the agent where new code belongs in an Electron multi-process project and which APIs each process may use, with rules for new bridges, services, agents and workers.
- Official
AI SDK
vercel-labs/ai-facts
Answer questions about the AI SDK and help build AI-powered features.
More from jamiedavenport/policystack
Policystack Audit
jamiedavenport/policystack
Audit a policystack.ts config: run policystack validate --json, explain each issue code, propose a minimal config fix, then re-validate until clean.
Policystack Init
jamiedavenport/policystack
Scaffold PolicyStack in a project: run the @policystack/cli installer, then wire the single <PolicyStack provider (policy + consent).
Policystack Jurisdiction
jamiedavenport/policystack
Explain the consent and policy-text posture (the §4.2 stance) implied by a set of declared PolicyStack jurisdictions.
Related
Works with
Categories
Questions about Policystack Instrument
What does Policystack Instrument do?
Find un-annotated data collection and data egress in a codebase and add PolicyStack collecting() / sharing() / thirdParty() / defineCookie() call sites so the generated policy reflects what the code…. Policystack Instrument is an agent skill from jamiedavenport/policystack. Find un-annotated data collection and data egress in a codebase and add PolicyStack collecting() / sharing() / thirdParty() / defineCookie() call sites so the generated policy reflects what the code actually does.
When should I use Policystack Instrument?
Policystack Instrument fits situations like: legal & Compliance work in your project.
How do I install Policystack Instrument in Claude Code?
Run `npx skills add jamiedavenport/policystack --skill policystack-instrument -a claude-code`. Or copy the skill folder (plugin/skills/policystack-instrument in jamiedavenport/policystack) into .claude/skills/policystack-instrument in your project. Claude Code loads it when a task matches its description.
How do I install Policystack Instrument in Codex?
Run `npx skills add jamiedavenport/policystack --skill policystack-instrument -a codex`. Or copy the skill folder (plugin/skills/policystack-instrument in jamiedavenport/policystack) into .agents/skills/policystack-instrument in your project. Codex loads it when a task matches its description.
Can I use Policystack Instrument in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jamiedavenport/policystack --skill policystack-instrument -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/policystack-instrument, .gemini/skills/policystack-instrument, .github/skills/policystack-instrument and .opencode/skills/policystack-instrument in your project.
What does Policystack Instrument need to run?
SKILL.md names no scripts, command-line tools or credentials: Policystack Instrument is instructions for the agent only.
Does Policystack Instrument access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Policystack Instrument safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Policystack Instrument use?
Policystack Instrument is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Policystack Instrument use?
About 916 tokens (SKILL.md is roughly 3.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Policystack Instrument?
Skills that share tags, products or a category with Policystack Instrument: C15t (c15t/c15t, 1.9k stars), Add Session Recording (gotempsh/temps, 828 stars), Dependency Auditor (alirezarezvani/claude-skills, 28k stars) and Vercel Composition Patterns (supabase/supabase, 111k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Policystack Instrument?
jamiedavenport (a GitHub user) maintains it in jamiedavenport/policystack, which has 164 GitHub stars. The repository holds 4 skills in this directory. The repository was last updated on September 10, 2026.
Source: jamiedavenport/policystack on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.